Melanie Desaive created CLOUDSTACK-10351:
--------------------------------------------
Summary: Add "Lets Encrypt CA" Certpath to SSVM Keystore (for
cdimage.debian.org)
Key: CLOUDSTACK-10351
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10351
Project: CloudStack
Issue Type: Improvement
Security Level: Public (Anyone can view this level - this is the default.)
Components: Secondary Storage
Affects Versions: 4.11.0.0
Reporter: Melanie Desaive
The Download of ISO Images from
https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso
fails with:
{quote}{{sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target}}
{quote}
The site "cdimage.debian.org" uses Certificates from "Lets Encrypt".
Could it be the certification path for "Lets Encrypt" is not included in the
Java Keystore on the SSVM?
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
